-
Drop the audit_review.md citations
-
Normalize comment banners to house style; strip AI-tell dashes in strings
-
multithreaded: adopt lint block, fix clippy, fmt
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
Bump rand to 0.10 across MNW crates
-
mt: give the outbound OAuth calls a per-request timeout
-
mt: mirror full identity on userinfo refresh, not just perks
-
Remediate audit findings: SSRF userinfo bypass, guest role, C1 scope gaps
-
server: mt architectural refactors (audit 2026-07-02 follow-up)
-
mt: make username reconcile and post creation atomic (ultra-fuzz S2 + M-St1)
-
mt: seal resource-in-community behind CommunityScope (ultra-fuzz CHRONIC C1)